$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa File: 59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa (raw, json) Hash identifier: ePslLop62SKyyDHp6m+U1da/tmlqjFpbW8ADiJnJjrg= Subject key identifier: 5C:A8:D4:79:B0:55:24:28:11:35:60:5C:DC:B1:EA:8C:25:60:14:AC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849754459ADED88CC01B41CE540 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 139.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:59:ad:ed:88:cc:01:b4:1c:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=1ca0b833-cb91-4e0a-a534-fd03c6cb0858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:a8:d8:da:3b:a5:6a:cd:cb:f6:d3:3d:1d: 91:92:ac:5a:f7:41:09:cc:72:fc:a7:84:a6:8f:cb: ef:fc:2a:11:dc:a5:ee:22:d0:45:a5:cb:78:ed:b2: 09:34:14:ca:ac:1b:92:e0:0d:8f:15:01:b3:c9:9b: a1:bb:5b:d2:7f:4c:70:3d:e8:eb:33:ea:c0:17:9a: 64:4c:03:58:59:50:28:88:00:ac:81:1d:c4:d7:ea: 6f:29:02:3f:1a:3b:a8:76:82:cf:b3:ce:9b:45:29: 64:6f:81:87:5f:c0:5a:8a:16:fc:af:be:26:ac:e2: bf:33:aa:1f:22:5a:cd:b5:4c:3b:57:09:68:68:29: 06:b7:41:ee:34:3d:4b:d2:63:e0:9c:a8:04:98:d8: bf:00:25:d3:39:90:53:8c:28:99:b9:ac:18:7a:7d: bd:4c:c1:0c:96:34:a8:f2:aa:bd:95:8a:62:ad:06: 8d:a4:ff:1a:de:5e:84:af:89:b8:06:66:2c:74:72: 4b:76:a2:0c:e6:71:47:f5:22:3e:a8:e1:20:56:87: 73:62:62:d5:94:4f:e6:59:24:00:c3:5a:65:8f:bc: e2:d6:20:81:ea:2d:2b:8e:3c:80:20:80:3f:d3:cf: 1e:ab:65:78:30:02:58:10:f5:0b:ae:fe:e5:31:a1: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A8:D4:79:B0:55:24:28:11:35:60:5C:DC:B1:EA:8C:25:60:14:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:53:f7:f8:57:02:87:cc:ff:bf:75:6a:0d:35:09:33:4b:1c: 12:39:77:23:15:4d:d8:f9:26:86:52:3e:5e:11:d5:96:c3:0b: d5:cf:df:8d:19:ac:be:bc:00:f4:36:b3:e4:2e:5e:1a:a2:df: 63:ce:ae:51:84:d4:2b:10:4d:84:d1:e3:f5:28:7f:68:20:04: 24:1a:f9:f3:6e:e3:db:11:0b:e1:45:23:8c:88:e8:e6:96:a1: 6b:96:a8:14:e7:66:d6:62:7d:e5:66:c8:79:0a:d1:6a:13:b2: 4d:cf:ea:14:c4:c7:6d:22:f4:10:fa:50:e9:3f:d0:b1:cc:99: 8b:d8:a3:8d:ed:c9:72:ec:c6:7b:20:56:f4:4a:41:4d:cb:61: 5c:44:56:44:bc:68:6d:0b:c4:83:e8:56:43:d7:1e:8d:58:3d: 45:12:20:e7:36:3f:f0:27:8d:ac:58:c4:9f:e4:18:d1:8c:38: 41:9d:ec:90:b6:50:a0:e4:0b:20:b5:d7:7e:21:36:08:8b:b7: 81:c5:c7:46:c6:7c:e1:58:97:c6:76:7a:62:fd:1d:e4:b5:d4: 8e:07:36:78:33:09:6a:e6:1f:5e:e2:3e:55:14:13:ba:fe:a8: ee:af:93:f1:eb:53:64:bb:ee:5f:5a:29:ee:5b:cd:e6:39:83: c6:22:de:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFmt7YjMAbQc5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MWNhMGI4MzMtY2I5MS00ZTBhLWE1MzQtZmQwM2M2Y2IwODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka6o2No7pWrNy/bTPR2Rkqxa90EJzHL8p4Sm j8vv/CoR3KXuItBFpct47bIJNBTKrBuS4A2PFQGzyZuhu1vSf0xwPejrM+rAF5pk TANYWVAoiACsgR3E1+pvKQI/GjuodoLPs86bRSlkb4GHX8Baihb8r74mrOK/M6of IlrNtUw7VwloaCkGt0HuND1L0mPgnKgEmNi/ACXTOZBTjCiZuawYen29TMEMljSo 8qq9lYpirQaNpP8a3l6Er4m4BmYsdHJLdqIM5nFH9SI+qOEgVodzYmLVlE/mWSQA w1plj7zi1iCB6i0rjjyAIIA/088eq2V4MAJYEPULrv7lMaHmhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyo1HmwVSQoETVgXNyx6owlYBSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTllZGRkN2MtNjU3YS0z Y2MwLTg1YmYtM2MxNTJiZTZiNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtT9/hXAofM/791ag01CTNLHBI5dyMVTdj5JoZSPl4R1ZbDC9XP340Z rL68APQ2s+QuXhqi32POrlGE1CsQTYTR4/Uof2ggBCQa+fNu49sRC+FFI4yI6OaW oWuWqBTnZtZifeVmyHkK0WoTsk3P6hTEx20i9BD6UOk/0LHMmYvYo43tyXLsxnsg VvRKQU3LYVxEVkS8aG0LxIPoVkPXHo1YPUUSIOc2P/AnjaxYxJ/kGNGMOEGd7JC2 UKDkCyC1134hNgiLt4HFx0bGfOFYl8Z2emL9HeS11I4HNngzCWrmH17iPlUUE7r+ qO6vk/HrU2S77l9aKe5bzeY5g8Yi3iE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:35:27 2025 by rpki-client